I’ve been hosting a few other sites on my server, for some friends, for quite a while. Up until now the sites have just contained weblogs so I haven’t had to worry about securing file transfers and such. For my own site development I created a nice little applescript applet that uses rsync over ssh to synchronize a local directory on my powerbook with my public html directory on the server. The applet has a text box to view the rsync output and two buttons, “synchronize” and “quit”. It’s worked well so when one of my friends called me and indicated they wanted to add some things to their site I contemplated just modifying the applet for them to use (he’s on OS X also). Then I started thinking about the larger picture; what if one of my other friends who doesn’t use OS X wants to have access to their public html folder? My first thought was to just enable FTP. Despite its utter lack of security it still seems to be widely used by web hosting services. However I just can’t get over the security issue. The idea of clear text usernames and passwords flowing across the internet to my server makes is just too much.
I wondered if any WYSIWYG clients supported more secure methods of file transfer, so I checked out Macromedia’s Dreamweaver site. I was pleased to see that yes, Dreamweaver MX 2004 now supports secure FTP. That’s good but restricting all my users to using a particular client didn’t seem like a good solution either. That’s when it hit me, if Dreamweaver has a secure FTP client built into it, surely there are some freely available, plain, secure FTP clients around. I checked into this a year or two ago but at the time I couldn’t find a client I liked, one that’s simple and easy for anyone to use. I was hoping things have changed since then and sure enough, I went to Apple’s OS X downloads site and immediately came across “Transmit“, a nice secure FTP client for OS X, that anyone can use. I haven’t bothered to check for windows clients, but I’m sure they’re out there. So, not only will I be able to keep server access relatively secure, I don’t have to change a thing on the server (since ssh is all secure FTP needs). I love it when things work out like this.